CVE-2006-7184

Exhibit Engine (EE) vulnerable to remote file inclusion via the toroot parameter in fetchsettings.php and fstyles.php (EE 1.22 and possibly earlier). Root cause: inadequate input sanitization when including PHP code, permitting an attacker to cause arbitrary code execution if PHP register_globals...

CVE-2006-7183

CVE-2006-7183 affects Exhibit Engine (EE) up to version 1.22. The issue is a PHP remote file inclusion in styles.php via the toroot parameter, allowing an attacker to cause arbitrary PHP code execution on the vulnerable server. The exploit uses a URL in toroot to include attacker-controlled code....

CVE-2006-7185

PHP remote file inclusion vulnerability in includes/userstandard.php in CMSmelborp Beta allows remote attackers to execute arbitrary PHP code via a URL in the relativeroot parameter...

CVE-2006-7185

CVE-2006-7185 refers to a PHP remote file inclusion in CMSmelborp Beta, exploitable via the relative_root parameter in includes/user_standard.php to allow execution of arbitrary PHP code. Affected software/component: CMSmelborp Beta (CMS platform). Root cause: improper handling of the relative_ro...

CVE-2006-7181

CVE-2006-7181 affects Morcego CMS versions 0.9.6 and earlier. It describes multiple PHP remote file inclusion vulnerabilities allowing remote attackers to execute arbitrary PHP code via a URL in the (1) fichero parameter to morcegoCMS.php or the (2) path parameter to adodb/adodb.inc.php. Note: th...

CVE-2006-7182

The CVE-2006-7182 issue is a PHP remote file inclusion in noticias.php for MNews 2.0 and earlier. The vulnerability allows remote code execution via a URL supplied to the inc parameter, yielding a CVSS v2 base score of 10.0 (HIGH) with network attack vector and no authentication. Affected: notici...

CVE-2006-7179

CVE-2006-7179 affects the MadWifi driver: ieee80211_input.c before 0.9.3 fails to properly process Channel Switch Announcement Information Elements, allowing remote attackers to cause a denial of service (loss of communication) by triggering a channel switch with Channel Switch Count ≤ 1. Public ...

CVE-2006-7180

CVE-2006-7180 affects the MadWifi driver (ieee80211_output.c) prior to 0.9.3, where unencrypted 802.11 frames can be observed before WPA authentication completes. Public sources in the connected documents describe this as enabling remote attackers to obtain sensitive information related to networ...

CVE-2006-7177

CVE-2006-7177 affects the MadWifi driver when operating in Ad-Hoc mode. The vulnerability allows remote attackers to cause a denial of service (system crash) by sending wireless packets that trigger a kernel panic in the ieee80211_input function, related to packets from a potentially malicious Wi...

CVE-2006-7178

CVE-2006-7178 affects the MadWifi driver prior to 0.9.3. The issue arises from improper handling of an AUTH frame by an IBSS node, allowing remote attackers within wireless range to cause a denial-of-service (system crash/hang). Publicly documented in various advisories (SUSE GLSA 200704-15, Gent...

FreeBSD nfsd NFS Mount Request Denial of Service (CVE-2006-0900)

...

Symantec Veritas NetBackup bpcd.exe Command Chaining (CVE-2006-4902)

Symantec Veritas NetBackup Server is a client/server backup application solution used for performing scheduled automatic backups and on-demand backups requested by users. A remote code execution vulnerability has been reported in Symantec Veritas NetBackup.A remote attacker could exploit the...

Snort 2.6.1 (Linux) - DCE/RPC Preprocessor Remote Buffer Overflow

!/usr/bin/python Remote exploit for Snort DCE/RPC preprocessor vulnerability as described in CVE-2006-5276. The exploit binds a shell to TCP port 4444 and connects to it. This code was tested against snort-2.6.1 running on Red Hat Linux 8 Author shall bear no responsibility for any screw ups caus...

Snort 2.6.1 (Linux) - DCERPC Preprocessor Remote Buffer Overflow

Snort 2.6.1 Linux - DCERPC Preprocessor Remote Buffer Overflow !/usr/bin/python Remote exploit for Snort DCE/RPC preprocessor vulnerability as described in CVE-2006-5276. The exploit binds a shell to TCP port 4444 and connects to it. This code was tested against snort-2.6.1 running on Red Hat Lin...

Microsoft Windows Workstation Service NetrWkstaUserEnum Denial of Service (CVE-2006-6723)

Microsoft Windows workstation service routes local file system requests and remote file or print network requests via Remote Procedure Call RPC. A denial of service vulnerability has been reported in the Microsoft Windows Workstation service. A remote attacker can exploit this issue by specially...

Buffer overflow

Buffer overflow in InterVations NaviCOPA HTTP Server 2.01 allows remote attackers to execute arbitrary code via a long 1 /cgi-bin/ or 2 /cgi/ pathname in an HTTP GET request, probably a different issue than CVE-2006-5112...

CVE-2007-1740

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-4843. Reason: This candidate is a duplicate of CVE-2006-4843. Notes: All CVE users should reference CVE-2006-4843 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-4843. Reason: This candidate is a duplicate of CVE-2006-4843. Notes: All CVE users should reference CVE-2006-4843 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2006-7176

CVE-2006-7176 affects Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier, where the MTA did not reject the localhost.localdomain domain for messages from external hosts, enabling potential message spoofing. Connected advisories (RHSA-2007:0252 and related vendor notes) document ...

CVE-2006-7175

CVE-2006-7175 affects Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier. The vulnerability arises because the administrator cannot disable SSLv2 encryption, which could allow use of less secure channels. Documented impact includes potential exposure of confidential information ...